Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/fBvWVp34p2xajWp-Lqp_rnTH1-w.roa
File: fBvWVp34p2xajWp-Lqp_rnTH1-w.roa (raw, json)
Hash identifier: kOFgWCuSUSlaobu3AxuRqpJRiFYER/nc9FYE+ZeSUmg=
Subject key identifier: 7C:1B:D6:56:9D:F8:A7:6C:5A:8D:6A:7E:2E:AA:7F:AE:74:C7:D7:EC
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 018CC94D93458C9EB9439D96FA236A29A948
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/fBvWVp34p2xajWp-Lqp_rnTH1-w.roa
Signing time: Tue 02 Jan 2024 08:32:33 +0000
ROA not before: Tue 02 Jan 2024 08:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:93:45:8c:9e:b9:43:9d:96:fa:23:6a:29:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c1bd6569df8a76c5a8d6a7e2eaa7fae74c7d7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:87:89:1f:b5:85:2e:db:f6:b0:94:34:35:
6b:74:59:a6:67:d5:b3:81:f3:36:70:8b:87:b1:a3:
b5:2a:d9:86:ca:31:c1:70:64:80:d8:c4:fa:84:08:
25:9e:15:fe:58:00:4a:21:8c:13:de:44:b7:c7:b6:
04:08:e3:83:c8:65:e9:ef:cd:39:cb:27:b0:f0:ba:
2e:d9:ef:ae:73:f4:92:d8:39:5d:4d:17:43:1a:84:
58:ab:01:17:fe:80:d4:a3:ee:be:a8:da:26:51:4f:
ee:15:2c:19:2e:5c:15:57:05:63:e6:9f:52:ea:f6:
e7:5d:10:ca:20:a3:de:c2:ba:62:7c:ca:9b:bf:cf:
a1:d9:2e:31:ba:de:67:41:79:b7:1d:72:e3:d4:ca:
92:70:c7:cb:dc:7f:04:c4:9d:42:d0:f1:dd:54:7c:
aa:d7:58:5f:e3:25:53:93:6d:62:70:e2:31:ff:cf:
6c:7c:68:cf:f5:59:90:91:e7:16:d7:77:33:ac:d4:
bc:e1:04:db:af:b5:ec:8d:34:18:e8:90:b3:20:3d:
64:15:ae:3b:5c:a2:c9:c3:fe:36:f3:df:3a:15:e2:
c5:de:97:4d:18:fb:5b:2d:05:e7:fd:0a:eb:7f:95:
95:ac:d6:90:78:98:53:19:7d:df:55:c4:f8:11:04:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1B:D6:56:9D:F8:A7:6C:5A:8D:6A:7E:2E:AA:7F:AE:74:C7:D7:EC
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/fBvWVp34p2xajWp-Lqp_rnTH1-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
07:97:b8:77:be:f5:d8:b9:1d:4b:0c:62:9a:ed:0c:be:13:b5:
9f:e9:d9:37:46:3c:91:71:23:ce:3e:2f:c9:11:ae:08:27:3b:
00:f9:a5:05:81:d0:2d:17:af:f5:8d:51:13:18:8c:2c:93:d1:
6f:98:e5:1a:16:46:7d:be:3e:ca:a3:f2:03:c5:87:da:f7:66:
3b:ba:0d:c4:09:e7:02:9d:ea:82:99:d5:4c:7b:13:aa:c7:1a:
aa:84:6a:12:24:02:d8:df:e4:72:74:2b:03:72:5e:45:2c:8b:
1d:28:37:9f:0e:53:cc:d0:fe:42:04:2e:5a:35:2c:a1:1f:6e:
55:e8:1d:5c:ed:3f:b4:9c:03:b1:39:a8:f2:3c:ee:28:7e:b5:
b2:58:bc:a7:0d:6b:e0:ad:44:3a:bc:19:0f:e4:d6:6f:f7:48:
6b:95:f1:bb:36:f1:67:f7:98:4a:3b:cd:62:61:a3:89:1a:f8:
82:65:2c:c4:fb:2b:09:9a:c7:9e:ed:ef:92:37:b3:cf:e4:ac:
f5:43:82:8c:20:9d:78:1b:b2:3b:76:e5:43:8b:d0:ef:2a:0b:
b7:83:f4:89:66:2f:4a:78:39:0c:a3:f7:72:06:67:2d:53:ae:
5b:09:dd:b6:a1:27:2b:ba:f5:b3:c9:02:11:58:cf:c1:3b:72:
04:1e:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:44 2025 by rpki-client